$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa File: f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa (raw, json) Hash identifier: x2wWmIG5t/PiwBzrV2dtt6nE5pU8OrucglG5fOszq7o= Subject key identifier: 49:73:E8:F3:A9:3B:EA:EA:12:57:7D:20:F2:DC:E0:E0:F7:B5:03:3A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7DF3FD2C49A7F404EFEE9447BDF1C8C9C8017EB4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa Signing time: Fri 25 Apr 2025 18:00:03 +0000 ROA not before: Fri 25 Apr 2025 18:00:03 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e000::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f3:fd:2c:49:a7:f4:04:ef:ee:94:47:bd:f1:c8:c9:c8:01:7e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 18:00:03 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=6f965a08c0dfdb23d62a4cbc89e9d8603d53d0365a8aa586e4d77f813c6be5df, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0e:28:39:c2:13:ba:e5:3a:4e:f5:7d:92:c6: d0:b7:4b:ca:d0:35:71:5d:5f:9c:b6:a5:d8:b1:ff: 3c:21:4c:d5:4c:58:fc:56:d0:43:7a:7c:e1:ab:87: 73:b6:af:ca:9d:1f:d0:61:10:38:a3:e2:43:54:30: 79:ff:e4:a1:6a:7f:cb:c2:58:86:8f:07:62:8e:ef: 9e:01:4a:36:7f:b4:49:f9:64:28:25:8d:4b:8a:f0: 25:a7:13:2d:18:78:93:f4:8a:8c:63:74:f6:fc:22: f0:87:37:2b:51:c5:67:c1:1d:23:ce:64:a3:97:0a: 10:a5:46:72:16:93:f9:6a:24:0b:85:4b:62:02:d0: 4a:fe:d8:51:88:7e:fb:0a:b9:70:3b:d1:01:d4:61: f2:ca:26:91:5f:0c:d3:fd:e5:73:72:be:9e:3d:b4: e7:dd:c9:fc:2a:21:32:2a:15:57:69:a7:aa:db:2e: 51:2e:74:5d:4d:d9:a9:09:2f:a1:5f:5f:d2:6a:4a: 42:57:17:75:ed:29:1e:3e:78:b6:12:58:3d:6c:c0: 3a:ca:8d:e9:3b:55:77:f4:b9:c0:ed:0c:7e:a3:4a: ee:89:1e:30:ba:05:d8:32:11:b3:c0:32:16:1f:78: 57:43:d5:7a:6c:ae:10:45:dd:06:84:66:00:08:79: 2d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:73:E8:F3:A9:3B:EA:EA:12:57:7D:20:F2:DC:E0:E0:F7:B5:03:3A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e000::/42 Signature Algorithm: sha256WithRSAEncryption 33:46:29:bc:d8:3f:80:1c:47:09:06:67:e3:92:0c:40:84:9c: a2:59:3c:e5:99:62:79:c5:82:40:81:29:e6:94:9c:e2:10:83: 5c:87:8c:64:d6:bb:1e:30:3b:0f:73:0a:9d:4f:17:c5:68:ed: fb:fe:16:17:1b:fd:75:11:79:82:f7:8d:26:6e:f1:9f:ca:d3: 52:6c:b8:5d:e7:0c:33:08:0e:ab:ed:09:13:c0:88:d5:6f:16: 35:b2:48:25:92:92:9d:66:aa:42:48:7f:4e:1e:6f:1a:0c:78: 8a:c1:57:00:62:59:52:e1:c0:b5:b8:2b:bf:cd:9b:92:dd:a5: 1c:44:43:1e:41:52:fd:ab:17:d1:b7:0a:b9:5f:77:20:3b:05: 92:54:66:96:55:4d:5a:b7:95:3b:7c:a4:2d:12:2b:7e:bb:93: 78:86:8d:4b:ea:b4:ff:ee:83:c3:9a:38:bb:bf:d2:f0:74:3f: cb:03:0b:9c:33:54:36:15:d2:37:57:1a:79:f6:7e:0f:17:db: d1:2d:43:c5:fc:b0:60:5f:e5:cf:9e:e9:06:6a:02:c6:25:1b: 2a:a4:f8:cb:46:54:24:b3:07:2f:ef:ac:01:7f:fb:c7:a9:0c: f4:ae:24:df:a6:0a:e7:ec:ee:c3:68:e3:f7:d8:ce:10:7c:b5: 7d:60:18:a7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUffP9LEmn9ATv7pRHvfHIycgBfrQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTgwMDAzWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2Zjk2NWEwOGMwZGZkYjIzZDYyYTRjYmM4OWU5ZDg2MDNk NTNkMDM2NWE4YWE1ODZlNGQ3N2Y4MTNjNmJlNWRmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzDig5whO65TpO9X2SxtC3S8rQNXFdX5y2pdix/zwhTNVM WPxW0EN6fOGrh3O2r8qdH9BhEDij4kNUMHn/5KFqf8vCWIaPB2KO754BSjZ/tEn5 ZCgljUuK8CWnEy0YeJP0ioxjdPb8IvCHNytRxWfBHSPOZKOXChClRnIWk/lqJAuF S2IC0Er+2FGIfvsKuXA70QHUYfLKJpFfDNP95XNyvp49tOfdyfwqITIqFVdpp6rb LlEudF1N2akJL6FfX9JqSkJXF3XtKR4+eLYSWD1swDrKjek7VXf0ucDtDH6jSu6J HjC6BdgyEbPAMhYfeFdD1XpsrhBF3QaEZgAIeS0BAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSXPo86k76uoSV30g8tzg4Pe1AzowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y1ZDE3MjdhLWViMmYtNGFlMC04ODFlLWM4ZmRjMzQ0Yjk1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD74AAwDQYJKoZIhvcNAQELBQADggEBADNGKbzYP4AcRwkGZ+OSDECE nKJZPOWZYnnFgkCBKeaUnOIQg1yHjGTWux4wOw9zCp1PF8Vo7fv+Fhcb/XUReYL3 jSZu8Z/K01JsuF3nDDMIDqvtCRPAiNVvFjWySCWSkp1mqkJIf04ebxoMeIrBVwBi WVLhwLW4K7/Nm5LdpRxEQx5BUv2rF9G3CrlfdyA7BZJUZpZVTVq3lTt8pC0SK367 k3iGjUvqtP/ug8OaOLu/0vB0P8sDC5wzVDYV0jdXGnn2fg8X29EtQ8X8sGBf5c+e 6QZqAsYlGyqk+MtGVCSzBy/vrAF/+8epDPSuJN+mCufs7sNo4/fYzhB8tX1gGKc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:12:29 2025 by rpki-client